![\"Image](\"https:\/\/wp.uthscsa.edu\/phishbowl\/wp-content\/uploads\/sites\/90\/2023\/11\/20231128ReviewSignAgreement.png\")
<\/p>\nThis email had an attachment. If the attachment was opened, it would have downloaded Malware to the recipient’s device.<\/p>\n
The Red Flag here is the email came from a user within the Merry Maids company located in the UK. Most likely, that user became infected by clicking on the attachment and their account began sending out the same email with the dangerous attachment. That is how bad actors infect so many machines. The infected accounts are used as bots to send out messages with infected attachments.<\/p>\n
This one was more straight forward since we obviously don’t use the Merry Maids UK services. Other times, it might not be so clear. Anytime you receive an email asking you to review or click on an attachment, ask yourself these questions:<\/p>\n
Was I expecting this?
\nDo I know the sender?<\/p>\n
If you know the sender but aren’t expecting an attachment, call them to see if they sent this. A call is better than an email since the bad actor could have control over their email account.
\nIf you don’t know the sender, it is best to delete or report it as Phish. Use the Phish Alert button in Outlook to report it as a Phish and delete it.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
This email had an attachment. If the attachment was opened, it would have downloaded Malware to the recipient’s device. The Red Flag here is the email came from a user within the Merry Maids company located in the UK. Most likely, that user became infected by clicking on the attachment and their account began sending […]<\/p>\n","protected":false},"author":412,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1739","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n